MS_PPT2SWF_Cancel
MS_PPT2SWF_Convert
MS_PPT2SWF_Finished
MS_PPT2SWF_Initialize
MS_PPT2SWF_SetParams
MS_PPT2SWF_SetProcess
Behavioral task
behavioral1
Sample
085a72b61a987906969867aed79ea87c778d0071b3f4404e1d5870394c35f545.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
085a72b61a987906969867aed79ea87c778d0071b3f4404e1d5870394c35f545.dll
Resource
win10v2004-20220812-en
Target
085a72b61a987906969867aed79ea87c778d0071b3f4404e1d5870394c35f545
Size
525KB
MD5
c6feea0a1a42117aeecd87d821e4ecd5
SHA1
7ade566f882b81f433a762cc7fc1f23821e48e79
SHA256
085a72b61a987906969867aed79ea87c778d0071b3f4404e1d5870394c35f545
SHA512
8c805f28405c8ed9390e3b570ff2101279acdf63c2243a9b86a33d0b68bd55771f1680d40101a82a3374f8fa8f73a37bf5a9b7cf7af38d16c9d3166604c4a747
SSDEEP
12288:Vj1fCVjnzhqOmLHG5ePFEjTYt4nUhCfisHG9bEII8GTb5:Vh2nlqO15GFEjZnsCfisHG9b5o5
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
MS_PPT2SWF_Cancel
MS_PPT2SWF_Convert
MS_PPT2SWF_Finished
MS_PPT2SWF_Initialize
MS_PPT2SWF_SetParams
MS_PPT2SWF_SetProcess
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE